Previous Topic: Display Multiple Verification Questions At One TimeNext Topic: Verify a User Attribute


Display One Verification Question at a Time

For increased security, you can display only one verification question at a time. Subsequent questions are displayed only after the preceding question is answered successfully.

To display each verification question on a separate page, define a Primary Verification Screen and a Secondary Verification Screen.

The Primary Verification Screen is displayed after users provide valid identification, such as a user ID. When the user successfully answers one question on the primary verification screen, CA Identity Manager displays the secondary verification screen for each remaining question.

To configure the primary and secondary configuration screens:

  1. Make sure that the |VerifyQuestion| and |VerifyAnswer| logical attributes are configured in the ForgottenPasswordHandler logical attribute handler. See the Programming Guide for Java.
  2. Navigate to one of the following screens, if necessary:
  3. Enter the text that appears above the area where users supply verification information in the Prompt for Primary Verification Screen field.
  4. In the Profile Screen for Primary Verification field, select a screen definition, such as the Forgotten Password Verify screen.

    Note: Modify the screen definition to include the Logical Attributes for each of the question and answer pairs that should appear on the screen.

  5. Enter the text that appears above the area where users supply verification information in the Prompt for Secondary Verification Screen field.
  6. Select the Forgotten Password Secondary Verify screen in the Profile Screen for Secondary Verification field.

    Modify the screen to include |VerifyQuestion| and |VerifyAnswer| logical attributes.

    Note: To use a secondary verification screen, you must configure a primary verification screen.

  7. Enter the number of questions that user must answer correctly in the Number of Questions field.
  8. Click OK.

More information:

Set Up the Forgotten Password Reset or User ID Task